My current firewall WinRoute 4.2 doesn't like ISDN packet sizes and SSL 3.0 so I tried ZoneAlarm which works fine from the proxy server but I can't get the client workstations to access the internet or send/receive emails but they can access the file server. ICS/NAT is enabled in ZoneAlarm. Is there an issue with ZA and DHCP? Do I have to set static IPs on the client PCs and include each in the Trusted Zone of ZA?